# SenderClarity

> SenderClarity is a DMARC management platform for small and mid-size businesses. It helps organizations monitor email authentication (SPF, DKIM, DMARC, BIMI), identify unauthorized senders in aggregate reports, and progressively enforce domain protection. The platform provides continuous monitoring, health scoring, alerting, and guided enforcement across all sending sources.

## Free DNS Tools

Interactive lookup tools for checking email authentication records against live DNS. No account required.

- [SPF Record Checker](https://www.senderclarity.com/tools/check-spf): Look up and analyze any domain's SPF record, including full nested include tree and total DNS lookup count. Useful for diagnosing SPF permerror (exceeding the 10-lookup limit).
- [DKIM Record Checker](https://www.senderclarity.com/tools/check-dkim): Look up DKIM public key records for any domain and selector. Verifies key presence, key length, and record format.
- [DMARC Record Checker](https://www.senderclarity.com/tools/check-dmarc): Analyze a domain's DMARC policy — policy mode (none/quarantine/reject), reporting addresses, alignment settings, and subdomain policy.
- [BIMI Record Checker](https://www.senderclarity.com/tools/check-bimi): Look up BIMI records for brand logo display in supporting email clients. Checks for VMC certificate presence.
- [Email Deliverability Investigation](https://www.senderclarity.com/tools/email-investigation): Investigate authentication results for a specific email message — SPF, DKIM, DMARC, and ARC chain analysis.

## Email Authentication Setup Guides

Step-by-step guides for configuring SPF, DKIM, and DMARC for popular email service providers. Each guide covers exact DNS records, DMARC alignment considerations specific to that provider, common issues, and SPF lookup impact.

### Email Providers

- [Google Workspace](https://www.senderclarity.com/guides/google-workspace-spf-dkim-dmarc-setup): SPF, DKIM, and DMARC setup for Google Workspace (formerly G Suite). SPF uses ~3–4 lookups.
- [Microsoft 365](https://www.senderclarity.com/guides/microsoft-365-spf-dkim-dmarc-setup): SPF, DKIM via Microsoft Defender portal, and DMARC for Microsoft 365 / Exchange Online. SPF uses ~2–3 lookups.
- [GoDaddy Email (Microsoft 365)](https://www.senderclarity.com/guides/godaddy-spf-dkim-dmarc-setup): Authentication for GoDaddy-hosted email, which runs on Microsoft 365 infrastructure. SPF uses ~2–3 lookups.
- [Zoho Mail](https://www.senderclarity.com/guides/zoho-mail-spf-dkim-dmarc-setup): SPF, DKIM, and DMARC for Zoho Mail, including regional data center (US/EU/India) SPF differences. SPF uses ~1–2 lookups.

### Marketing & Automation Platforms

- [Mailchimp](https://www.senderclarity.com/guides/mailchimp-spf-dkim-dmarc-setup): Domain authentication for Mailchimp marketing campaigns. SPF will not align — DKIM is required for DMARC.
- [HubSpot](https://www.senderclarity.com/guides/hubspot-spf-dkim-dmarc-setup): DKIM and return-path setup for HubSpot marketing, sales sequences, and transactional email.
- [Klaviyo](https://www.senderclarity.com/guides/klaviyo-spf-dkim-dmarc-setup): Domain authentication for Klaviyo e-commerce email campaigns and flows.
- [ActiveCampaign](https://www.senderclarity.com/guides/activecampaign-spf-dkim-dmarc-setup): DKIM and Mailserver Domain CNAME setup for ActiveCampaign, covering full domain alignment.
- [Brevo (Sendinblue)](https://www.senderclarity.com/guides/brevo-sendinblue-spf-dkim-dmarc-setup): Domain authentication for Brevo (formerly Sendinblue) marketing and transactional email.
- [Constant Contact](https://www.senderclarity.com/guides/constant-contact-spf-dkim-dmarc-setup): Self-authentication (custom DKIM) for Constant Contact. SPF alignment not achievable; DKIM required.
- [Campaign Monitor](https://www.senderclarity.com/guides/campaign-monitor-spf-dkim-dmarc-setup): DKIM setup for Campaign Monitor. SPF will not align — the SPF include is not recommended.
- [AWeber](https://www.senderclarity.com/guides/aweber-spf-dkim-dmarc-setup): Three-CNAME DKIM setup for AWeber. No SPF include needed or recommended.
- [Omnisend](https://www.senderclarity.com/guides/omnisend-spf-dkim-dmarc-setup): Domain DKIM setup for Omnisend, which sends via Mailgun infrastructure. SPF alignment not achievable.
- [Kit (ConvertKit)](https://www.senderclarity.com/guides/convertkit-kit-spf-dkim-dmarc-setup): Verified Sending Domain setup for Kit (formerly ConvertKit). Uses CNAME-based SPF delegation; no root SPF changes needed.
- [Customer.io](https://www.senderclarity.com/guides/customerio-spf-dkim-dmarc-setup): Subdomain-based sending domain setup for Customer.io. Requires relaxed DMARC alignment; no root SPF changes needed.

### Transactional Email Services

- [SendGrid](https://www.senderclarity.com/guides/sendgrid-spf-dkim-dmarc-setup): Domain authentication (DKIM + return-path CNAMEs) for Twilio SendGrid. Full SPF and DKIM alignment achievable.
- [Amazon SES](https://www.senderclarity.com/guides/amazon-ses-spf-dkim-dmarc-setup): Easy DKIM and custom MAIL FROM domain setup for Amazon Simple Email Service.
- [Postmark](https://www.senderclarity.com/guides/postmark-spf-dkim-dmarc-setup): Sender signature DKIM and custom bounce domain for Postmark. Full alignment achievable.
- [Mailgun](https://www.senderclarity.com/guides/mailgun-spf-dkim-dmarc-setup): Domain verification and DKIM for Mailgun. Subdomain sending recommended for reputation isolation.
- [Mandrill (Mailchimp Transactional)](https://www.senderclarity.com/guides/mandrill-spf-dkim-dmarc-setup): DKIM and custom return-path for Mandrill. Separate from Mailchimp marketing; requires Mailchimp Standard plan or above.

### Customer Support Platforms

- [Freshdesk](https://www.senderclarity.com/guides/freshdesk-spf-dkim-dmarc-setup): DKIM setup for Freshdesk. Heavy SPF footprint (~6 lookups) due to nested SendGrid and regional includes.
- [Zendesk](https://www.senderclarity.com/guides/zendesk-spf-dkim-dmarc-setup): DKIM signing for Zendesk ticket replies and automated notifications.
- [Intercom](https://www.senderclarity.com/guides/intercom-spf-dkim-dmarc-setup): DKIM and optional return-path CNAME for Intercom. No SPF include needed — Intercom manages SPF internally.

### E-commerce & Website Builders

- [Shopify](https://www.senderclarity.com/guides/shopify-spf-dkim-dmarc-setup): Domain authentication for Shopify transactional and marketing email.
- [WooCommerce](https://www.senderclarity.com/guides/woocommerce-spf-dkim-dmarc-setup): Authentication for WooCommerce stores via WP Mail SMTP and a transactional provider. Default PHP mail is unauthenticated.
- [Squarespace](https://www.senderclarity.com/guides/squarespace-spf-dkim-dmarc-setup): SPF and DKIM for Squarespace commerce and form notification emails.
- [Wix](https://www.senderclarity.com/guides/wix-spf-dkim-dmarc-setup): Domain authentication for Wix transactional and marketing (Ascend) email.

### CRM Platforms

- [Salesforce](https://www.senderclarity.com/guides/salesforce-spf-dkim-dmarc-setup): DKIM key setup for Salesforce CRM, with notes on Marketing Cloud (ExactTarget) and Pardot as separate systems.
- [HubSpot](https://www.senderclarity.com/guides/hubspot-spf-dkim-dmarc-setup): See Marketing & Automation above.

## Learning Center

Conceptual articles explaining email authentication protocols and common problems.

- [What is DMARC?](https://www.senderclarity.com/learn/what-is-dmarc): Overview of DMARC — how it works, why it matters, and how it relates to SPF and DKIM.
- [SPF Explained](https://www.senderclarity.com/learn/spf-explained): How SPF works, the include mechanism, and the 10-lookup limit.
- [DKIM Explained](https://www.senderclarity.com/learn/dkim-explained): How DKIM signing and verification works, key selectors, and CNAME vs TXT records.
- [DMARC Policies](https://www.senderclarity.com/learn/dmarc-policies): The difference between none, quarantine, and reject — and how to progress toward enforcement.
- [Alignment Modes](https://www.senderclarity.com/learn/alignment-modes): Relaxed vs strict alignment for SPF and DKIM under DMARC.
- [Common SPF Issues](https://www.senderclarity.com/learn/common-spf-issues): Diagnosing and fixing SPF permerror, too many lookups, and multiple SPF records.
- [DKIM Failures](https://www.senderclarity.com/learn/dkim-failures): Why DKIM fails — key mismatch, body hash failure, forwarding, and DNS propagation issues.
- [DNS Propagation](https://www.senderclarity.com/learn/dns-propagation): How DNS propagation works and what to expect when adding authentication records.

## Product

- [SenderClarity Platform](https://www.senderclarity.com/product): DMARC monitoring and enforcement platform for SMBs.
- [DMARC Monitoring](https://www.senderclarity.com/product/dmarc-monitoring): Continuous monitoring of DMARC aggregate reports with sender identification and health scoring.
- [SPF Management](https://www.senderclarity.com/product/spf-management): SPF record analysis, lookup count tracking, and hosted SPF to stay under the 10-lookup limit.
- [DKIM Validation](https://www.senderclarity.com/product/dkim-validation): Ongoing DKIM key monitoring across all configured selectors.
- [Alerting](https://www.senderclarity.com/product/alerting): Alerts for new sending sources, authentication failures, policy changes, and health score changes.
- [Pricing](https://www.senderclarity.com/pricing): Plan tiers — Clarity, Assurance, Confidence, and Custom.